{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography/2"}],"enrichment":{"capability":"Produces and verifies cryptographic signatures for TrueLayer API requests and webhooks using PEM keys and JWKS.","skillfed_tags":["truelayer-integration","request-signing","webhook-verification"],"use_cases":["Sign outbound POST requests to TrueLayer API endpoints using a private key and key ID.","Verify incoming webhook signatures from TrueLayer by extracting and validating the Tl-Signature header.","Add idempotency keys and custom headers to signed API requests to prevent duplicate processing.","Validate webhook JWS headers and ensure the key source (jku) is from an allowed TrueLayer domain.","Integrate TrueLayer payment or open banking flows into a Python backend with request authentication."],"what_it_does":"truelayer-signing is a Python library for cryptographic signing and verification of TrueLayer API requests and webhooks. It provides a fluent builder API to construct signed requests using PEM-encoded private keys and to verify incoming webhook signatures using JWKS (JSON Web Key Sets). The library depends only on cryptography and supports Python 3.10 through 3.14.\n\nThe package is designed for developers integrating with TrueLayer's API who need to authenticate outbound requests or validate inbound webhook payloads. It handles the low-level cryptographic operations (signing with private keys, verifying with public keys from JWKS) while exposing a straightforward method-chaining interface for building and verifying signed HTTP requests.","worth_installing":"Yes. The package is actively maintained, has no known vulnerabilities, low install friction, and a permissive license. Install it if you are integrating with TrueLayer's API and need to sign requests or verify webhooks; it is the standard tool for this task in Python."},"id":"truelayer-signing","links":{"html":"https://skillfed.io/packages/truelayer-signing","md":"https://skillfed.io/packages/truelayer-signing.md","pypi":"https://pypi.org/project/truelayer-signing/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-06-18","license_spdx":null,"license_treatment":"permissive","name":"truelayer-signing","python_support":"supports_current","summary":"Produce & verify TrueLayer API requests signatures"},"popularity":{"monthly_downloads":191606,"position":9879,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.4.0"}